crestmonddig[.]live

The domain crestmonddig.live has been identified as an active investment scam, posing a high risk to potential visitors. Analysis indicates that the domain was registered on February 17, 2026, through Ultahost, Inc. The website presents itself as Crestmond Digital, offering users access to a wealth of trading opportunities, which is a common tactic used by phishing sites to lure unsuspecting victims. The SSL certificate for the domain is issued by ZeroSSL, a provider known for issuing certificates to a wide range of websites, including malicious ones. This domain resolves to the IP address 66.23.226.51, which is located in the United States and is hosted by Interserver, Inc. The domain is currently flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the security community. The nameservers used are vda7700a.trouble-free.net and vda7700b.trouble-free.net, which are associated with a hosting provider that has been linked to various malicious activities. Infrastructure analysis reveals that the site uses technologies such as Bootstrap, LiteSpeed, SweetAlert2, and jsDelivr, which are often employed to create a legitimate appearance and enhance user interaction. The HTTP status code of 200 confirms that the site is operational and accessible. Defenders should be cautious and consider blocking this domain to prevent users from falling victim to the investment scam. Additionally, monitoring for any related infrastructure or domains is recommended to mitigate potential further attacks.